SSCP · Question #1080
What security principle is based on the division of job responsibilities - designed to prevent fraud?
The correct answer is B. Separation of Duties. Separation of Duties (SoD) is a security principle focused on dividing critical job functions and responsibilities among multiple individuals to prevent fraud and reduce the risk of errors.
Question
What security principle is based on the division of job responsibilities - designed to prevent fraud?
Options
- AMandatory Access Control
- BSeparation of Duties
- CInformation Systems Auditing
- DConcept of Least Privilege
How the community answered
(53 responses)- A4% (2)
- B87% (46)
- C8% (4)
- D2% (1)
Why each option
Separation of Duties (SoD) is a security principle focused on dividing critical job functions and responsibilities among multiple individuals to prevent fraud and reduce the risk of errors.
Mandatory Access Control (MAC) is an access control model that enforces strict access rules based on security labels, not on the division of job responsibilities.
Separation of Duties (SoD) is a control measure that prevents any single person from having complete control over a sensitive or critical process, thereby requiring multiple individuals to collude for fraud to occur. This principle significantly enhances internal controls and reduces the risk of malicious acts or mistakes going unnoticed.
Information Systems Auditing is the process of examining and evaluating an organization's information systems for compliance and effectiveness, rather than a principle for job responsibility division.
The Concept of Least Privilege dictates that users should be granted only the minimum necessary access rights to perform their job, which is distinct from distributing tasks among multiple individuals.
Concept tested: Separation of Duties principle
Source: https://learn.microsoft.com/en-us/training/modules/describe-security-governance-concepts/4-describe-security-governance-principles
Topics
Community Discussion
No community discussion yet for this question.